CVE-2024-38959: Creativeitem Academy Lms

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter.

Affected products

• Creativeitem Academy Lms: version 6.8.1 only

Published 2024-07-09. Last modified 2026-06-17.